Authentication in Asp.net - suniladhya/Advantage GitHub Wiki
Three default important ways and three custom authentication ways for doing authentication and authorization i.e. windows, forms ,passport, multipass, JWT and SAML authentication
- Authentication is the process for checking the identity of a user based on the user’s credentials.
- Authorization also known as “Permission Control” will come after authentication.
Form Authentication
Forms authentication flow:
- When a user requests a page for the application, ASP.NET checks session cookie. If the cookie exists and valid, ASP.NET assumes the user is authenticated and processes the request.
- If session cookies does not exists or not valid then it redirect to login form.
- User will enter username and password and if they are valid then he will get authenticated and authorized.